Cookie & Privacy Policy

At Kurhotel Skodsborg A/S, (“Kurhotel Skodsborg”, “we”, “us” or “our”) we prioritize confidentiality and data security. This privacy policy applies to our processing of personal data and sets out guidelines for Kurhotel Skodsborg’s processing of your personal data and provides you with the information you are entitled to receive under applicable data protection legislation. You must read the privacy policy before submitting your personal data to Kurhotel Skodsborg.

1. Data controller and contact details

The data controller of your personal data is:

Kurhotel Skodsborg A/S
Skodsborg Strandvej 139
2942 Skodsborg

CVR no.: 15978333
Email: info@skodsborg.dk

2. If you visit the website skodsborg.dk

2.1 Cookies

Types of personal data

Kurhotel Skodsborg uses cookies on the website www.skodsborg.dk and processes your personal data in this connection. Kurhotel Skodsborg may collect the following personal data about you when you visit our website:

• IP address
• MAC address
• Browsing history
• Information about your use of our website, including click behavior

We use cookies to collect the above-mentioned personal data. You can read more about the use of cookies in our cookie policy, which you can find via this link.

The purposes of the processing

Your personal data may be processed for the following purposes:

• Marketing in general
• Product and service development
• Statistics and analysis

Treatment basis

Kurhotel Skodsborg processes your personal data on the following basis:

• Legitimate interests: We base the processing of your personal data on our legitimate interests in e.g. conducting statistics, analysis, providing support as well as improving and developing our products and services (Article 6(1)(f) of the GDPR).

When you visit our website, we ask for your informed consent to place non-functional cookies in accordance with the cookie rules. You have the right to withdraw your consent at any time. You can read more about how to change your cookie settings in our cookie policy, which is availabe here.

Storage period

Cookies are deleted in accordance with our cookie policy, which is available here. However, the data may be stored longer in anonymized form.

3rd party services

The website Dinnerbooking and the app Skodsborg Spa & Fitness are 3rd party services that provide services to Kurhotel Skodsborg. Kurhotel Skodsborg does not own these services or the data in them. The same goes for booking stays on web services like hotels.com.

2.2 If you use the chat function on the website, contact customer service or otherwise communicate with us

Types of personal data

When you use the contact form or chat function on the website www.skodsborg.dk, contact customer service or otherwise communicate with Kurhotel Skodsborg, we collect and process your personal data. Kurhotel Skodsborg collects, processes and stores the following types of personal data about you:

• Name, email address, phone number
• What your inquiry is about
• IP address
• Date of your inquiry
• Other information you provide in connection with your inquiry. We encourage you not to provide us with sensitive personal data unless it is strictly necessary for the processing of your request. In this regard, the information should only be sent in highly encrypted form if you send the information via email.

The purposes of the processing

Your personal data is processed for the following purposes:

• Handling your inquiry
• General communication
• Statistics and analysis

Treatment basis

Kurhotel Skodsborg processes your personal data on the following basis. The basis depends on the nature of your request.

• Legitimate interests: We may process your personal data based on our legitimate interests in handling your inquiry, communicating with you and developing our products and services (Article 6(1)(f) of the GDPR).
• Contractual obligations: If your inquiry concerns the (potential) conclusion of a contract, we process your data in order to carry out pre-contractual measures (Article 6(1)(b) of the GDPR).

Storage period

Your personal data will be stored for 1 year from the last contact. However, the data may be stored longer in anonymized form. If you are a customer or employee of one of our suppliers or other business partners, please see section 5 below.

2.3 If you use our webshop

Types of personal data

When you use our webshop to purchase or book stays, events, gift cards, treatments or other services we offer, Kurhotel Skodsborg processes your personal data. We may collect, process and store the following types of personal data about you:

• Your name
• Your email address
• This phone number
• Your address
• Your interests
• Date of birth and gender
• Your payment details if you pay on the site
• Gift card number if you purchase a gift card
• Booking number if you make a booking
• Information about your order/purchase history
• Booking date and time
• Comments on your order
• Digital footprints (e.g. information about how you use Kurhotel Skodsborg’s webshop)

The purposes of the processing

Your personal data is processed for the following purposes:

• Order fulfillment in our webshop
• Manage shipments, claims and returns
• User account/profile management
• Sending marketing without consent based on previous purchases from us in cases where we choose to use this option in the Danish Marketing Practices Act
• Statistics and analysis

Treatment basis

Kurhotel Skodsborg processes your personal data on the following basis:

• Legitimate interests: We process your personal data on the basis of our legitimate interest in marketing ourselves to you in cases where consent is not required, as well as our legitimate interest in being able to conduct statistics and analysis in order to develop and improve our services (Article 6(1)(f) of the GDPR).
• Contractual obligations: We process your personal data to fulfill the purchase agreement entered into with you, including to be able to deliver the ordered goods, handle complaints, returns, etc. (Article 6(1)(b) of the GDPR).

Storage period

As a general rule, we will keep your personal data for 2 years after your last purchase or booking.
Information relating to accounting material is stored for 5 years from the end of the financial year to which the information relates. However, we may process your personal data for a longer period of time in anonymized form.

3. If you sign up for our newsletter(s)

Types of personal data

Kurhotel Skodsborg collects, processes and stores your personal data for marketing purposes when you sign up for newsletter(s). We may collect, process and store the following types of personal data about you:

• Name and email address
• IP address
• Your consent
• Your interests
• Your click behavior in relation to posted material

The purposes of the processing

Your personal data may be processed for the following purposes:

• Marketing
• Analytics and statistics

Treatment basis

Kurhotel Skodsborg processes your personal data on one or more of the following bases:

• Consent: Kurhotel Skodsborg will only use your personal data for direct marketing purposes, including sending newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).
• Legitimate interests: The processing of your personal data for analysis and statistics is based on our legitimate interests in improving and developing our services (Article 6(1)(f) of the GDPR).

Storage period

Your personal data will be stored as long as your consent to receive newsletters is active. The data may also be stored longer in anonymized form.

4. If you are applying for a job at Kurhotel Skodsborg

When you apply for a job at Kurhotel Skodsborg, we process your personal data in connection with the recruitment process. We recommend that your application does not include a social security number or sensitive personal data, such as personal data that reveals racial or ethnic background, religion, union membership, sexuality or health information.

Types of personal data

Kurhotel Skodsborg may collect, process and store the following types of personal data about you:

• Contact information such as name, email address and phone number
• Information that appears in the application, CV and any attachments
• Relevant information that is publicly available on the internet and social media, especially information about previous employment, activities, competencies, performance and general appearance
• Results of personality tests, if relevant to the position applied for
• Criminal record, if relevant to the position applied for
• References from previous and/or current employers that you have provided in your application or that you have given consent for us to contact
• Other information you provide us with in connection with the recruitment process

Purpose of processing

Your personal data will be used to assess whether we wish to offer you a position at Kurhotel Skodsborg.

Treatment basis

Kurhotel Skodsborg processes your personal data on one or more of the following bases:

• Legitimate interests: We may process your personal data on the basis of our legitimate interest in assessing whether we wish to offer you employment, including on the basis of the information you provide in your CV, application and any attachments, on the basis of relevant information publicly available on the internet and social media, results of personality tests, references from referees you have provided in your application, and other information you provide us with in connection with the recruitment process. If the position applied for involves financial responsibility (e.g. bookkeeping or auditing), we may – after a specific assessment – obtain information about your credit rating. Processing may also be necessary for our legitimate interest in defending or asserting legal claims (Article 6(1)(f) of the GDPR).
• Consent: If we wish to obtain references from previous and/or current employers that you have not provided as references in your application, we will only do so if we have your consent (Article 6(1)(a) of the GDPR).
  If we need to see your criminal record as part of our assessment, we will ask for your consent (section 8(3) of the Danish Data Protection Act).
  If the position you have applied for exceptionally requires special health conditions, we will – after concrete assessment – ask for your explicit consent prior to the processing of such personal data (Article 9(2)(a) and Article 6(1)(a) of the General Data Protection Regulation).

Storage period

If you are offered a position at Kurhotel Skodsborg, your application and other relevant personal data collected during the recruitment process will be stored in your personnel file with us.

If you are not offered a position, we will keep your application and any additional personal data collected during the recruitment procedure for a period of 6 months after our rejection, unless you have given your consent to a longer retention of such personal data.

You can withdraw any consent you may have given as part of our recruitment process at any time. Withdrawal of your consent will have an effect on the future processing of your personal data, but does not affect the lawfulness of the processing based on the consent before the withdrawal. If you wish to withdraw your consent, please contact us as indicated below.

Criminal records are deleted immediately after we have reviewed them.

5. If you are a supplier, business partner, etc.

This section contains the policy for Kurhotel Skodsborg’s processing of personal data about owners of sole proprietorships or contact persons at suppliers and other partners who cooperate with Kurhotel Skodsborg.

Collection of personal data

Kurhotel Skodsborg may collect, process and store your personal data in the following cases:

• When your company or the company you work for enters into an agreement with Kurhotel Skodsborg
• When you have shown interest in Kurhotel Skodsborg’s products and services, e.g. by giving us your business card
• When you collaborate and communicate with Kurhotel Skodsborg

Types of personal data

Kurhotel Skodsborg may collect, process and store the following types of personal data about you:

• Name, email address, phone number and similar contact information
• Individual information, e.g. preferred language
• Organizational information such as company name and address, job title, area of employment, primary work location and country
• Contractual information such as orders, invoices, contracts and other agreements between your company (or your employer) and Kurhotel Skodsborg, which may contain e.g. your contact information
• Financial information, such as payment terms, bank details and credit ratings (if a sole trader)

We may receive such information directly from you (primarily through emails and other correspondence with you) or from a third party such as your employer.

The purposes of the processing

Your personal data may be processed for the following purposes:

• General planning, fulfillment and administration of collaborations, including contracts
• Administration such as processing payments, evaluating credit ratings, accounting, auditing, as well as providing support
• Newsletters and other marketing communications
• Fulfilling requests from you
• General communication
• Product and service development
• Statistics and analysis
• Compliance with applicable laws and regulations, e.g. fulfilling our obligations to prevent illegal activities
• Dealing with conflict

Treatment basis

Kurhotel Skodsborg primarily processes your personal data on one or more of the following bases:

• Contractual obligations: In certain cases, the processing of your personal data is necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
• Legitimate interests: We may process your personal data based on our legitimate interests in e.g. managing day-to-day operations in accordance with lawful and fair business practices, including planning, execution and administration of the cooperation or our legitimate interest in e.g. performing credit ratings, statistics, analytics, marketing activities (where consent is not required), providing support as well as improving and developing our products and services. Processing may also be necessary for our legitimate interest in preventing fraud or establishing, defending or exercising legal claims (Article 6(1)(f) of the GDPR).
• Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as our obligation to prevent illegal activities (Article 6(1)(c) of the GDPR).

Storage period

Your personal data will be stored until 1 year after the last contact. Information included in accounting material is stored for 5 years from the end of the financial year to which the information relates. However, the data may be stored longer in anonymized form.

6. If you visit Kurhotel Skodsborg

6.1 When you visit our spa hotel

This section contains the policy for Kurhotel Skodsborg’s processing of personal data about guests and other visitors to the physical premises of the spa hotel.

Types of personal data

When you visit our spa hotel, Kurhotel Skodsborg may collect, process and store the following types of personal data about you:

• Your name, email address, address and phone number
• Your interests
• Date of birth and gender
• Gift card number if you purchase or use a gift card
• Booking number if you have a booking
• Your stay, including room number, digital footprints from your room key and date and time of check in and check out
• Your purchases and bookings at the hotel, including bar and restaurant purchases, minibar, treatments and other services
• Booking date and time
• Payment information
• Special remarks regarding your visit, e.g. your special requests or your query regarding allergens that we need to take into account
• Photo and video material in connection with surveillance of selected, publicly accessible areas of our spa hotel (all monitored areas are marked with signage)
• Login, MAC address, name and digital footprints when using our WiFi

The purposes of the processing

Your personal data may be processed for the following purposes:

• Fulfilling your purchases and bookings
• To provide customer service
• For legal claims to be established, asserted or defended

Treatment basis

Kurhotel Skodsborg processes your personal data on one or more of the following bases:

• Contractual obligations: In certain cases, the processing of your personal data is necessary for the performance of a contract with you (Article 6(1)(1) of the GDPR b). If you want us to take special considerations into account, for example, disabilities or allergies, we will only process the personal data that you voluntarily provide us with (with regard to any health data, Article 9(2) of the General Data Protection Regulation a)
• Legitimate interests: In most cases, we base the processing of your personal data on our legitimate interests in providing customer service and establishing, defending or exercising legal claims (Article 6(1)(f) of the GDPR). This applies, for example, to processing in relation to complaints. Information about criminal offenses collected via CCTV surveillance is also processed on the basis of Kurhotel Skodsborg’s legitimate interests in solving criminal offenses (section 8(3) of the Danish Data Protection Act).
• Legal obligation: The processing of information about your payment details and your purchases is necessary for compliance with applicable bookkeeping, VAT and marketing legislation (Article 6(1)(c) of the Data Protection Act).

Storage period

Your information is stored for 2 years from your last visit. Information relating to accounting material is stored for 5 years from the end of the financial year to which the information relates. CCTV footage is deleted after 30 days. However, we may process your personal data for a longer period of time in anonymized form.

6.2 When you deliver goods to us

Types of personal data

When you deliver goods at our physical locations, Kurhotel Skodsborg processes your personal data via access control and CCTV surveillance. Kurhotel Skodsborg may collect, process and store the following types of personal data about you:

• Your name
• Your employer
• This phone number
• Information about your access to boom lifts
• Photo and video material in connection with CCTV surveillance

The purposes of the processing

Your personal data is processed for the following purposes:

• To give you access to our physical locations
• To ensure the security of our physical locations
• To prevent and solve crime at our physical locations

Treatment basis

Kurhotel Skodsborg processes your personal data on the following basis:

• Legitimate interests: We base the processing of your personal data on our legitimate interests in providing you with access to our physical locations and in protecting our physical locations (Article 6(1)(f) of the GDPR). Information about criminal offenses collected via CCTV surveillance is also processed on the basis of our legitimate interests in solving criminal offenses (section 8(3) of the Danish Data Protection Act).

Storage period

Your personal data will be stored for the duration of the supplier relationship. However, CCTV footage is deleted after 30 days. However, the data may be stored longer in anonymized form.

7. If you visit our social media profiles

This section describes how Kurhotel Skodsborg processes personal data collected via Kurhotel Skodsborg’s social media profiles and pages.

Kurhotel Skodsborg and together with the individual social media providers are joint data controllers for the processing of your personal data collected in connection with your visit to one of our profiles or social media pages. Kurhotel Skodsborg complies with the guidelines from the Danish Data Protection Agency regarding joint data responsibility and tries as far as possible, using the available tools and in the best possible way, to ensure that you receive information about the processing of your personal data when you visit our profiles and social media pages.

Kurhotel Skodsborg has profiles or pages on the following social media:

• Facebook (Facebook Ireland Ltd.)
  • Facebook’s privacy policy is available here
  • Customize your Facebook settings here
• Instagram (Facebook Ireland Ltd.)
  • Facebook’s privacy policy for Instagram is available here
  • Customize your privacy settings on Instagram under the “Settings” menu item on your Instagram profile
• YouTube (Google LLC)
  • Google’s privacy policy for YouTube is available here
  • Customize your YouTube settings here
• LinkedIn (LinkedIn Ireland Unlimited Company)
  • LinkedIn’s privacy policy is available here
  • Customize your settings on LinkedIn here

Types of personal data

Depending on your behavior on our profiles or social media pages, Kurhotel Skodsborg and the social media providers may collect the following personal data about you:

• Your “likes” and other reactions expressed on Kurhotel Skodsborg’s profile or page
• Your comments on Kurhotel Skodsborg’s profile or page
• Your visit to Kurhotel Skodsborg’s profile or page
• Age, gender, marital status, workplace, lifestyle, geographic information and areas of interest

The purposes of the processing

Kurhotel Skodsborg processes your personal data for the following purposes:

• To communicate with you if you comment on our posts or send us a message
• Improving our products and services
• Improving our social media profiles
• Statistics and analysis

You can read about the purposes for which the social media providers process your personal data in their respective privacy policies.

Treatment basis

Kurhotel Skodsborg processes your personal data on the following basis:

• Legitimate interests: We base the processing of your personal data on our legitimate interests in being able to communicate with and market ourselves to you on our social media profiles, as well as our legitimate interest in improving our products and services (Article 6(1)(f) of the GDPR).

The social media providers process your personal data on the following basis:

• Legitimate interests: The social media providers process your personal data, among other things, to improve their advertising system and give Kurhotel Skodsborg access to statistics that the provider, for example, compiles based on your visit to our profile or page on the social media in question. The social media providers base the processing of your personal data on their legitimate interests, including their interest in providing an innovative, personalized, secure and profitable service (Article 6(1)(f) GDPR).
• Consent: The social media providers process certain of your personal data in accordance with your consent, which you can withdraw at any time via your privacy settings on the individual social media (Article 6(1)(a) of the GDPR).

Storage period

Kurhotel Skodsborg stores the personal data contained in messages sent via the chat function, including Messenger, for a maximum of 3 months. Likes, comments and other expressions you leave on our profiles and pages, including our posts on such profiles and pages, will not be deleted. However, you have the option to delete such statements yourself by removing your statement directly on the relevant page, profile or post.

For information about each provider’s storage of your personal data, please refer to the privacy policy of the relevant provider. However, the data may be stored longer in anonymized form.

8. Disclosure to other controllers and entrustment to processors

In order to fulfill the above purposes, we may give third parties access to your personal data who, based on a contractual relationship with Kurhotel Skodsborg, provide relevant services. Examples include IT suppliers, email providers and IT solution providers. Such service providers will only process personal data in accordance with our instructions under data processing agreements.

In connection with Kurhotel Skodsborg’s development, the company structure may change, e.g. through a full or partial sale of the company. In the case of partial transfer of assets containing personal data, the legal basis for the related transfer of personal data is, as a starting point, Article 6(1)(f) of the General Data Protection Regulation, as Kurhotel Skodsborg has a legitimate interest in transferring parts of its assets and making commercial changes.

Other than as described above, your personal data will generally not be disclosed to a third party without your permission. However, under certain circumstances and in accordance with the law, it may be necessary to disclose your personal data to:

• The police
• Lawyers
• Auditors
• Courts and tribunals
• Public authorities
• Potential buyers
• Affiliated companies

If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such transfer will be based on the European Commission’s standard contracts, which you have the right to access.

9. Your rights

• You have the right to access the personal data we process about you
• You have the right to object to our collection and further processing of your personal data
• You have the right to rectification and erasure of your personal data, subject to certain statutory exceptions, including the Bookkeeping Act
• You have the right to request us to restrict the processing of your personal data
• Under certain circumstances, you can also request to receive a copy of your personal data as well as the transmission of the personal data you have provided to us to another controller (data portability)
• You can withdraw any consent you may have given at any time. We will then delete your personal data unless we can continue processing on another basis. You can unsubscribe from our newsletter by clicking the link at the bottom of the newsletter

10. Questions and complaints

If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, please contact us:

Kurhotel Skodsborg A/S
Skodsborg Strandvej 139
2942 Skodsborg
Email: info@skodsborg.dk

If your complaint is not resolved by us and you want to take the matter further, you can complain to the Danish Data Protection Agency:

Data Protection Authority
Carl Jacobsens Vej 35
2500 Valby
Phone: 33 19 32 00
Email: dt@datatilsynet.dk

***

Date of last update: October 1, 2023